$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa File: f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa (raw, json) Hash identifier: 9L+BYMMsUblI3y0lxCXNpK7UMnA9v/s/OFFFu0WZ9Xc= Subject key identifier: A8:2A:D7:09:FA:E7:D9:7F:A1:A1:61:EB:56:0B:85:D8:87:06:D0:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628409E27DD19F51A6B2C680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396599 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:e2:7d:d1:9f:51:a6:b2:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=6cef100f-ea4c-4f6e-a3b6-af839621a58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:55:a6:ac:59:36:41:a1:3b:6f:85:da:84: 3e:f7:31:b1:2b:7e:f6:f2:ed:05:b6:a0:44:a4:e6: 06:1c:f5:a0:a3:13:dd:7f:c8:b0:3c:64:52:ae:f0: 3f:ed:33:be:ba:dd:8c:7d:b5:03:c2:7b:0d:12:4e: 50:19:56:de:b2:29:10:b4:60:60:af:5b:0e:0c:56: 28:e3:a4:5d:f0:91:32:9e:5d:94:1d:b9:31:94:4b: 78:5a:a6:fb:b6:a1:7e:f6:80:63:6c:e0:20:61:18: fa:12:f8:c3:be:50:51:8e:c5:6c:3d:51:d6:a6:14: d1:95:73:9c:da:bd:7f:b0:2e:08:c8:68:99:1c:68: b4:de:2c:5b:f0:bc:3c:bd:4d:63:cc:22:88:f5:c1: 61:e2:a1:5f:85:19:85:c7:df:d5:fb:a1:58:12:a9: 63:ee:cb:0c:06:fe:d1:6c:56:f0:6b:a0:d0:9b:75: 4d:13:d9:8c:dc:33:b1:e7:f6:fc:63:81:0e:21:49: 02:c7:06:2e:f7:eb:3a:08:79:95:d7:66:f2:1e:e5: ec:84:44:fa:5a:94:ac:83:61:2e:84:aa:ef:cd:3b: 25:cc:32:3a:07:9c:1f:64:ab:b1:c9:fd:90:49:18: ae:a9:9b:b5:08:de:3b:f0:9f:b0:32:f7:03:06:c4: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:D7:09:FA:E7:D9:7F:A1:A1:61:EB:56:0B:85:D8:87:06:D0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cf:e2:96:0d:9f:cc:b2:7c:79:b9:4e:1d:ff:5c:2e:2b:14: 92:02:a7:3d:ba:c0:c8:74:b0:03:77:47:6e:52:ae:02:df:16: fa:29:22:4e:2f:d1:26:d5:90:41:a3:a3:c1:d9:62:6b:d4:bc: 80:b7:5f:b8:01:e4:23:e3:92:d3:69:7f:20:42:e6:10:3e:80: c9:f3:76:26:bb:30:df:86:41:ce:15:bd:25:b3:0a:fb:42:97: 5b:d6:d0:6f:8a:f8:65:26:66:be:fb:c4:f9:7c:d0:fc:d4:af: 1b:42:b4:e8:ea:70:39:a6:76:3c:26:43:16:45:90:1d:c5:79: af:26:28:6e:b8:4c:aa:39:a5:e7:c0:18:5f:98:dc:bf:63:2c: f0:ae:07:da:88:07:94:70:f8:ff:e6:82:06:17:46:f6:ee:ce: 98:4b:c6:61:58:27:b6:eb:db:33:16:0c:a7:42:81:d6:03:21: 34:ac:4e:dd:44:6e:69:44:ee:20:0d:ba:ff:e8:bd:ba:3e:eb: df:91:01:04:76:14:3e:46:a8:1b:8c:10:6c:19:54:60:f8:3d: 99:d0:07:c1:92:e3:85:58:95:46:de:5a:96:f9:41:74:c5:64: 16:43:ad:25:41:20:85:99:09:47:01:08:df:f5:4b:af:4e:81: 0d:4f:04:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAnifdGfUaayxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk NmNlZjEwMGYtZWE0Yy00ZjZlLWEzYjYtYWY4Mzk2MjFhNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOpVpqxZNkGhO2+F2oQ+9zGxK3728u0FtqBE pOYGHPWgoxPdf8iwPGRSrvA/7TO+ut2MfbUDwnsNEk5QGVbesikQtGBgr1sODFYo 46Rd8JEynl2UHbkxlEt4Wqb7tqF+9oBjbOAgYRj6EvjDvlBRjsVsPVHWphTRlXOc 2r1/sC4IyGiZHGi03ixb8Lw8vU1jzCKI9cFh4qFfhRmFx9/V+6FYEqlj7ssMBv7R bFbwa6DQm3VNE9mM3DOx5/b8Y4EOIUkCxwYu9+s6CHmV12byHuXshET6WpSsg2Eu hKrvzTslzDI6B5wfZKuxyf2QSRiuqZu1CN478J+wMvcDBsSeuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKgq1wn659l/oaFh61YLhdiHBtCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU0ZTVhYTgtMzQwMi0z ZWIwLTg0YzAtYzliOWQ1MmY5ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkz+KWDZ/Msnx5uU4d/1wuKxSSAqc9usDIdLADd0duUq4C3xb6KSJO L9Em1ZBBo6PB2WJr1LyAt1+4AeQj45LTaX8gQuYQPoDJ83YmuzDfhkHOFb0lswr7 Qpdb1tBvivhlJma++8T5fND81K8bQrTo6nA5pnY8JkMWRZAdxXmvJihuuEyqOaXn wBhfmNy/YyzwrgfaiAeUcPj/5oIGF0b27s6YS8ZhWCe269szFgynQoHWAyE0rE7d RG5pRO4gDbr/6L26PuvfkQEEdhQ+RqgbjBBsGVRg+D2Z0AfBkuOFWJVG3lqW+UF0 xWQWQ60lQSCFmQlHAQjf9UuvToENTwSL -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:57 2025 by rpki-client